diff options
| author | Maximilian Hils <git@maximilianhils.com> | 2016-02-15 23:00:11 +0100 |
|---|---|---|
| committer | Maximilian Hils <git@maximilianhils.com> | 2016-02-15 23:00:11 +0100 |
| commit | 87d9afcf2e257eee7c5aa08c3f0dc64da79b0647 (patch) | |
| tree | 71b10729d160f0269d02548d1ef9e183be1397d9 /docs/features/upstreamcerts.rst | |
| parent | 36f34f701991b5d474c005ec45e3b66e20f326a8 (diff) | |
| parent | 3d9a5157e77b5a3237dc62994f4e3d4c75c2066e (diff) | |
| download | mitmproxy-87d9afcf2e257eee7c5aa08c3f0dc64da79b0647.tar.gz mitmproxy-87d9afcf2e257eee7c5aa08c3f0dc64da79b0647.tar.bz2 mitmproxy-87d9afcf2e257eee7c5aa08c3f0dc64da79b0647.zip | |
Merge pull request #937 from mhils/single-repo
Combine mitmproxy, pathod and netlib in a single repo.
Diffstat (limited to 'docs/features/upstreamcerts.rst')
| -rw-r--r-- | docs/features/upstreamcerts.rst | 23 |
1 files changed, 0 insertions, 23 deletions
diff --git a/docs/features/upstreamcerts.rst b/docs/features/upstreamcerts.rst deleted file mode 100644 index af2e2226..00000000 --- a/docs/features/upstreamcerts.rst +++ /dev/null @@ -1,23 +0,0 @@ -.. _upstreamcerts: - -Upstream Certificates -===================== - -When mitmproxy receives a connection destined for an SSL-protected service, it -freezes the connection before reading its request data, and makes a connection -to the upstream server to "sniff" the contents of its SSL certificate. The -information gained - the **Common Name** and **Subject Alternative Names** - is -then used to generate the interception certificate, which is sent to the client -so the connection can continue. - -This rather intricate little dance lets us seamlessly generate correct -certificates even if the client has specified only an IP address rather than the -hostname. It also means that we don't need to sniff additional data to generate -certs in transparent mode. - -Upstream cert sniffing is on by default, and can optionally be turned off. - -================== ============================= -command-line :option:`--no-upstream-cert` -mitmproxy shortcut :kbd:`o` then :kbd:`U` -================== ============================= |